U.S. government contractor arrested for allegedly stealing $46M in seized cryptocurrency

John Daghita, a 25-year-old government contractor’s son, was arrested on March 4, 2026, in Saint Martin for allegedly stealing $46 million in cryptocurrency from U.S. Marshals Service wallets.

The FBI and French GIGN units arrested Daghita following months of investigation by law enforcement and blockchain analyst ZachXBT, who first publicly identified the suspect in January 2026.

Arrest in Saint Martin caps international investigation

The arrest was carried out through cooperation between U.S. and French law enforcement agencies.

French authorities in Saint Martin detained Daghita as part of a coordinated international operation involving the Groupe d’intervention de la Gendarmerie nationale (GIGN) and FBI investigators.

According to authorities, investigators recovered a metal briefcase containing stacks of U.S. $100 bills along with several hard drives and digital security keys believed to be linked to cryptocurrency wallets.

“FBI will continue working 24/7 with our international partners to track down, apprehend, and bring to justice those who attempt to defraud American taxpayers, no matter where they try to hide.”

Kash Patel, Director, Federal Bureau of Investigation, in a public statement announcing the arrest.

Authorities say Daghita allegedly stole funds from wallets tied to cryptocurrency seized in major criminal cases and held by the U.S. Marshals Service.

The agency is responsible for managing billions of dollars in confiscated digital assets for the U.S. government.

Officials are expected to pursue extradition proceedings so the suspect can face charges in the United States.

Contractor connection raises insider risk concerns

Investigators believe the alleged theft may have been enabled through access linked to a government contractor.

Daghita is reportedly the son of Dean Daghita, president of Command Services & Support (CMDSS), a Virginia-based technology firm that secured a $4 million contract in 2024 to assist the U.S. Marshals Service in managing certain seized cryptocurrencies.

While authorities have not publicly confirmed exactly how the suspect accessed the wallets, investigators believe the contractor connection may have provided indirect access to the systems used to manage digital assets.

The contract had already drawn scrutiny before the theft allegations emerged. A competing firm challenged the award, arguing that CMDSS lacked certain regulatory registrations and citing potential conflicts of interest involving a former Marshals Service official.

The U.S. Government Accountability Office ultimately rejected the protest and allowed the contract to stand.

Following the public revelations about the alleged theft, CMDSS reportedly took down its website and social media accounts.

The situation is raising broader concerns among investors and policymakers about how governments secure cryptocurrency holdings.

The U.S. Marshals Service reportedly controls large quantities of digital assets seized from criminal cases, including Bitcoin linked to historic hacks and darknet markets.

A blockchain investigator helped expose the alleged theft

The case first surfaced publicly in January 2026, when a well-known blockchain investigator operating under the pseudonym ZachXBT published evidence linking Daghita to suspicious cryptocurrency transactions.

The investigation began after a Telegram dispute between alleged cybercriminals in which Daghita reportedly screen-shared a wallet containing millions of dollars in cryptocurrency.

Analysts later traced that wallet to addresses connected to U.S. government-seized funds.

ZachXBT later stated that the suspect continued to mock the investigation publicly and even sent small “dust” transactions to the investigator’s wallet address.

On-chain analysis reportedly traced millions of dollars worth of Ether and other digital assets moving through wallets linked to the suspect.

In total, investigators estimate that more than $46 million was stolen from government-controlled wallets.

Case highlights security challenges in government crypto custody

Beyond the criminal allegations, the incident is raising serious questions about how public institutions handle large cryptocurrency reserves.

The U.S. Marshals Service is one of the world’s largest holders of confiscated cryptocurrency because it stores assets seized by law enforcement in criminal investigations.

Analysts estimate that the agency has handled tens of billions of dollars in digital assets over the past decade.

Security experts say insider risk remains one of the most difficult threats to mitigate when managing digital assets at scale.

The alleged theft also underscores the growing role of blockchain analytics and independent investigators in detecting financial crime in the crypto sector.

Unlike traditional financial systems, blockchain transactions are publicly visible, enabling analysts to trace the movement of funds across networks.

Daghita has not yet publicly responded to the allegations, and he is presumed innocent until proven guilty in court.

However, the case is likely to intensify debate within the crypto industry about custody standards, contractor oversight, and the security of institutional crypto holdings.